Installazione OpenVPN su Debian - Revision history

Gabriele.vivinetto at 17:13, 12 June 2019

2019-06-12T17:13:49Z

← Older revision		Revision as of 17:13, 12 June 2019
Line 1:		Line 1:
			==NOTA PER Debian >= Jessie==
			Con systemctl è necessario abilitare le VPN create in
			/etc/openvpn/nomevpn.conf

			systemctl daemon-reload
			systemctl enable openvpn@nomefilevpn.service
			systemct restart openvpn@nomefilevpn.service

	== Configurazione Server Linux ==		== Configurazione Server Linux ==

Gabriele.vivinetto: /* Configurazione Client Windows */

2011-09-16T12:34:12Z

Configurazione Client Windows

← Older revision		Revision as of 12:34, 16 September 2011
Line 429:		Line 429:

	Creare il file di configurazione come da template e copiare file e cartella coi certificati sul client.		Creare il file di configurazione come da template e copiare file e cartella coi certificati sul client.

			Assegnare lo user che usa OpenVPN al Gruppo
			Newtork Configuration Operator
			altrimenti openvpn si collega, ma non imposta il routing

	== Caso di server VPN NON default gateway ==		== Caso di server VPN NON default gateway ==

Gabriele.vivinetto: /* Configurazione Server Linux */

2009-01-30T16:52:45Z

Configurazione Server Linux

← Older revision		Revision as of 16:52, 30 January 2009
Line 3:		Line 3:
	Installare il pacchetto:		Installare il pacchetto:
	<pre>		<pre>
	sudo apt-get install openvpn		sudo apt-get install openvpn openssl
	</pre>		</pre>

Gabriele.vivinetto at 16:58, 26 November 2008

2008-11-26T16:58:52Z

← Older revision		Revision as of 16:58, 26 November 2008
Line 3:		Line 3:
	Installare il pacchetto:		Installare il pacchetto:
	<pre>		<pre>
	apt-get install openvpn		sudo apt-get install openvpn
	~~</pre>~~

	~~Creare il device di rete:~~

	~~<pre>~~
	~~Debian Configuration~~

	~~???????????????????????????? Configuring openvpn ????????????????????????????~~
	~~? ?~~
	~~? If you accept here, the package will make a special device called ?~~
	~~? /dev/net/tun for openvpn's use. If you refuse, the device won't be made ?~~
	~~? now. Read README.Debian for details on how to make it. If you are using ?~~
	~~? devfs refuse here. ?~~
	~~? ?~~
	~~? Would you like a TUN/TAP device to be created? ?~~
	~~? ?~~
	~~? <Yes> ?~~
	~~? ?~~
	~~?????????????????????????????????????????????????????????????????????????????~~
	~~</pre>~~

	~~Rispondere "si"~~

	~~<pre>~~
	~~Debian Configuration~~

	~~???????????????????????????? Configuring openvpn ????????????????????????????~~
	~~? ?~~
	~~? In some cases you may be upgrading openvpn in a remote server using a ?~~
	~~? VPN to do so. The upgrade process stops the running daemon before ?~~
	~~? installing the new version, in that case you may lose your connection, ?~~
	~~? the upgrade may be interrupted, and you may not be able to reconnect to ?~~
	~~? the remote host. ?~~
	~~? ?~~
	~~? Unless you do your upgrades locally, it is advised NOT to stop openvpn ?~~
	~~? before it gets upgraded. The installation process will restart it once ?~~
	~~? it's done. ?~~
	~~? ?~~
	~~? This option will take effect in your next upgrade. ?~~
	~~? ?~~
	~~? Would you like to stop openvpn before it gets upgraded? ?~~
	~~? ?~~
	~~? <Yes> ?~~
	~~? ?~~
	~~?????????????????????????????????????????????????????????????????????????????~~
	</pre>		</pre>

Line 82:		Line 37:

	export SERVER_VPN_IF=tun21		export SERVER_VPN_IF=tun21
	export CLIENT_VPN_IF=~~tun0~~		export CLIENT_VPN_IF=tun25

	Gli indirizzi pubblici delle due macchine saranno:		Gli indirizzi pubblici delle due macchine saranno:

	export SERVER_WAN_IP=~~217~~.~~141~~.~~88.34~~		export SERVER_WAN_IP=server.host.dom
	export CLIENT_WAN_IF=~~81.117~~.~~165~~.~~252~~		export CLIENT_WAN_IF=client.host.dom

	La VPN ascolterà sulle interfacce aventi i seguenti indirizzi:		La VPN ascolterà sulle interfacce aventi i seguenti indirizzi:

	export SERVER_LISTEN_IP=~~217~~.~~141~~.88.34		export SERVER_LISTEN_IP=x.y.z.k.
	export CLIENT_LISTEN_IP=81.~~117~~.~~165~~.~~252~~		export CLIENT_LISTEN_IP=a.b.c.d

	Nel caso le macchine abbiano indirizi privati, inserire quelli. ~~Naturalemente~~ andranno configurati gli opportuni port mapping sui router.		Nel caso le macchine abbiano indirizi privati, inserire quelli. Naturalmente andranno configurati gli opportuni port mapping sui router.

	La VPN utilizzera la seguente porta UDP, che andrà quindi sbloccta sul firewall o port-mappata sui router:		La VPN utilizzera la seguente porta UDP, che andrà quindi sbloccta sul firewall o port-mappata sui router:
Line 102:		Line 57:
	La vpn verrà chiamata per convenzione		La vpn verrà chiamata per convenzione

	export ~~gsspa~~		export OVPN_NAME=vpnname

	<pre>		<pre>
	export SERVER_LAN=192.168.0.0		export SERVER_LAN=192.168.0.0
	export CLIENT_LAN=192.168.21.0		export CLIENT_LAN=192.168.25.0
	export SERVER_VPN_IP=10.0.21.254		export SERVER_VPN_IP=10.0.25.254
	export CLIENT_VPN_IP=10.0.21.253		export CLIENT_VPN_IP=10.0.25.253
	export SERVER_VPN_IF=~~tun21~~		export SERVER_VPN_IF=tun25
	export CLIENT_VPN_IF=~~tun0~~		export CLIENT_VPN_IF=tun25
	export SERVER_WAN_IP=~~217~~.~~141~~.~~88.34~~		export SERVER_WAN_IP=uf.galimberti.net
	export CLIENT_WAN_IP=~~81.117~~.~~165~~.~~252~~		export CLIENT_WAN_IP=cs.galimberti.net
	export SERVER_LISTEN_IP=~~217.141~~.88.34		export SERVER_LISTEN_IP=uf.galimberti.net
	export CLIENT_LISTEN_IP=~~81.117~~.~~165~~.~~252~~		export CLIENT_LISTEN_IP=cs.galimberti.net
	export OVPN_PORT=~~21000~~		export OVPN_PORT=25000
	export OVPN_NAME=~~gsspa~~		export OVPN_NAME=cs
	</pre>		</pre>

Line 210:		Line 165:
	Far partire la VPN:		Far partire la VPN:
	<pre>		<pre>
	sudo ~~/etc/init~~.d/openvpn start $OVPN_NAME		sudo invoke-rc.d openvpn start $OVPN_NAME
	</pre>		</pre>

Gabriele.vivinetto: Installazione OpenVPN su Debian Sarge moved to Installazione OpenVPN su Debian

2008-11-26T15:01:26Z

Installazione OpenVPN su Debian Sarge moved to Installazione OpenVPN su Debian

← Older revision	Revision as of 15:01, 26 November 2008
(No difference)

Gabriele.vivinetto: sudo mods

2007-03-12T08:43:29Z

sudo mods

← Older revision		Revision as of 08:43, 12 March 2007
Line 268:		Line 268:

	<pre>		<pre>
	cat > /etc/openvpn/$OVPN_NAME.conf <<EOFile		cat \| sudo tee /etc/openvpn/$OVPN_NAME.conf > /dev/null <<EOFile

	dev $CLIENT_VPN_IF		dev $CLIENT_VPN_IF

Gabriele.vivinetto: sudo mods

2007-03-12T08:39:03Z

sudo mods

← Older revision		Revision as of 08:39, 12 March 2007
Line 122:		Line 122:

	<pre>		<pre>
	mkdir -p /etc/openvpn/certs		sudo mkdir -p /etc/openvpn/certs
	cd /etc/openvpn/certs		cd /etc/openvpn/certs
	openvpn --genkey --secret $OVPN_NAME.key		sudo openvpn --genkey --secret $OVPN_NAME.key
			sudo chmod o= $OVPN_NAME.key
	</pre>		</pre>

Line 135:		Line 136:
	-rw------- 1 root root 636 Sep 6 16:46 static.key		-rw------- 1 root root 636 Sep 6 16:46 static.key

	cat $OVPN_NAME.key		sudo cat $OVPN_NAME.key
	#		#
	# 2048 bit OpenVPN static key		# 2048 bit OpenVPN static key
Line 162:		Line 163:

	<pre>		<pre>
	cat > /etc/openvpn/$OVPN_NAME.conf <<EOFile		cat \| sudo tee /etc/openvpn/$OVPN_NAME.conf > /dev/null <<EOFile

	dev $SERVER_VPN_IF		dev $SERVER_VPN_IF
Line 209:		Line 210:
	Far partire la VPN:		Far partire la VPN:
	<pre>		<pre>
	/etc/init.d/openvpn start $OVPN_NAME		sudo /etc/init.d/openvpn start $OVPN_NAME
	</pre>		</pre>

Gabriele.vivinetto: /* Configurazione Server Linux */

2007-03-12T08:24:56Z

Configurazione Server Linux

← Older revision		Revision as of 08:24, 12 March 2007
Line 55:		Line 55:
	<pre>		<pre>
	cd /etc/openvpn		cd /etc/openvpn
	mkdir certs		sudo mkdir certs
	cd certs		cd certs
	openssl dhparam -out dh1024.pem 1024		sudo openssl dhparam -out dh1024.pem 1024
	</pre>		</pre>

Gabriele.vivinetto at 19:05, 15 May 2006

2006-05-15T19:05:30Z

@@ Line 369: / Line 369: @@
 == VPN Client to Lan (Roadwarrior) ==
 Creare i certificati con Xca, e copiarli nella stessa directory.
@@ Line 379: / Line 385: @@
 </pre>
-customizzare i seguenti valori e settarli in una shell:
+Creare le directory per i certificati ed i log:
 <pre>

Gabriele.vivinetto: /* Configurazione Server */

2006-04-12T14:10:49Z

Configurazione Server

← Older revision		Revision as of 14:10, 12 April 2006
Line 122:		Line 122:

	<pre>		<pre>
			mkdir -p /etc/openvpn/certs
	cd /etc/openvpn/certs		cd /etc/openvpn/certs
	openvpn --genkey --secret $OVPN_NAME.key		openvpn --genkey --secret $OVPN_NAME.key